DeFi United Unveils rsETH Bridge Remediation Plan, Targets Liquidation of 107,000 rsETH Tied to Exploit

DeFi United said Tuesday it has finalized a technical remediation plan to address a cross-chain bridge flaw impacting Kelp DAO's rsETH. According to the alliance, attackers exploited a vulnerability in the UniChain-to-Ethereum bridge built on LayerZero, using forged inbound packets to mint 116,500 rsETH. Roughly 107,000 rsETH remains locked as collateral across seven related addresses on Aave and Compound. DeFi United said it has secured enough ETH commitments to restore rsETH backing. The ETH will be converted into rsETH in batches and deposited into the bridge's locked contract. LayerZero Labs said it committed more than 10,000 ETH on Tuesday to support the effort. To unwind the attacker's positions, DeFi United plans to carry out controlled liquidations through governance proposals on Aave and Compound, with expected recoveries of about 13,000 ETH and 16,776 ETH, respectively. During the remediation period, WETH and rsETH reserves across multiple chains will remain frozen. DeFi United warned of risks including governance-approval delays, potential disruption by the attacker, and the fact that new security measures have not yet been validated in production.